@proofhound/core 0.1.6

package/dist/server/modules/token/token.controller.d.ts

@@ -0,0 +1,57 @@
+import { type CurrentUserPayload } from '../../common/decorators/current-user.decorator';
+import { TokenService } from '../../common/contracts/token.service';
+export declare class TokenController {
+    private readonly service;
+    constructor(service: TokenService);
+    list(actor: CurrentUserPayload): Promise<{
+        data: {
+            id: string;
+            name: string;
+            prefix: string;
+            ipWhitelist: string[] | null;
+            lastUsedAt: string | null;
+            expiresAt: string | null;
+            createdBy: string;
+            createdByDisplayName: string | null;
+            createdAt: string;
+        }[];
+        total: number;
+    }>;
+    create(rawBody: unknown, actor: CurrentUserPayload): Promise<{
+        token: {
+            id: string;
+            name: string;
+            prefix: string;
+            ipWhitelist: string[] | null;
+            lastUsedAt: string | null;
+            expiresAt: string | null;
+            createdBy: string;
+            createdByDisplayName: string | null;
+            createdAt: string;
+        };
+        plaintext: string;
+    }>;
+    update(tokenId: string, rawBody: unknown, actor: CurrentUserPayload): Promise<{
+        token: {
+            id: string;
+            name: string;
+            prefix: string;
+            ipWhitelist: string[] | null;
+            lastUsedAt: string | null;
+            expiresAt: string | null;
+            createdBy: string;
+            createdByDisplayName: string | null;
+            createdAt: string;
+        };
+    }>;
+    reveal(tokenId: string, actor: CurrentUserPayload): Promise<{
+        tokenId: string;
+        plaintext: string | null;
+        available: boolean;
+    }>;
+    delete(tokenId: string, actor: CurrentUserPayload): Promise<{
+        tokenId: string;
+    }>;
+    private parseTokenId;
+}
+//# sourceMappingURL=token.controller.d.ts.map

package/dist/server/modules/token/token.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.controller.d.ts","sourceRoot":"","sources":["../../../../src/server/modules/token/token.controller.ts"],"names":[],"mappings":"AAEA,OAAO,EAAe,KAAK,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAEtG,OAAO,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AAEpE,qBAEa,eAAe;IACd,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,YAAY;IAG5C,IAAI,CAAgB,KAAK,EAAE,kBAAkB;;;;;;;;;;;;;;IAK7C,MAAM,CAAS,OAAO,EAAE,OAAO,EAAiB,KAAK,EAAE,kBAAkB;;;;;;;;;;;;;;IAOzE,MAAM,CAAmB,OAAO,EAAE,MAAM,EAAU,OAAO,EAAE,OAAO,EAAiB,KAAK,EAAE,kBAAkB;;;;;;;;;;;;;IAO5G,MAAM,CAAmB,OAAO,EAAE,MAAM,EAAiB,KAAK,EAAE,kBAAkB;;;;;IAKlF,MAAM,CAAmB,OAAO,EAAE,MAAM,EAAiB,KAAK,EAAE,kBAAkB;;;IAIxF,OAAO,CAAC,YAAY;CAKrB"}

package/dist/server/modules/token/token.controller.js

@@ -0,0 +1,99 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenController = void 0;
+const common_1 = require("@nestjs/common");
+const shared_1 = require("@proofhound/shared");
+const current_user_decorator_1 = require("../../common/decorators/current-user.decorator");
+const http_actor_guard_1 = require("../../common/contracts/http-actor.guard");
+const token_service_1 = require("../../common/contracts/token.service");
+let TokenController = class TokenController {
+    constructor(service) {
+        this.service = service;
+    }
+    async list(actor) {
+        return this.service.listUserTokens(actor);
+    }
+    async create(rawBody, actor) {
+        const parse = shared_1.createUserTokenSchema.safeParse(rawBody);
+        if (!parse.success)
+            throw new common_1.BadRequestException(parse.error.issues);
+        return this.service.createUserToken(parse.data, actor);
+    }
+    async update(tokenId, rawBody, actor) {
+        const parse = shared_1.updateUserTokenSchema.safeParse(rawBody);
+        if (!parse.success)
+            throw new common_1.BadRequestException(parse.error.issues);
+        return this.service.updateUserToken(this.parseTokenId(tokenId), parse.data, actor);
+    }
+    async reveal(tokenId, actor) {
+        return this.service.revealUserToken(this.parseTokenId(tokenId), actor);
+    }
+    async delete(tokenId, actor) {
+        return this.service.deleteUserToken(this.parseTokenId(tokenId), actor);
+    }
+    parseTokenId(tokenId) {
+        const parse = shared_1.tokenIdParamSchema.safeParse(tokenId);
+        if (!parse.success)
+            throw new common_1.BadRequestException(parse.error.issues);
+        return parse.data;
+    }
+};
+exports.TokenController = TokenController;
+__decorate([
+    (0, common_1.Get)(),
+    __param(0, (0, current_user_decorator_1.CurrentUser)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TokenController.prototype, "list", null);
+__decorate([
+    (0, common_1.Post)(),
+    __param(0, (0, common_1.Body)()),
+    __param(1, (0, current_user_decorator_1.CurrentUser)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], TokenController.prototype, "create", null);
+__decorate([
+    (0, common_1.Patch)(':tokenId'),
+    __param(0, (0, common_1.Param)('tokenId')),
+    __param(1, (0, common_1.Body)()),
+    __param(2, (0, current_user_decorator_1.CurrentUser)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object]),
+    __metadata("design:returntype", Promise)
+], TokenController.prototype, "update", null);
+__decorate([
+    (0, common_1.Get)(':tokenId/plaintext'),
+    __param(0, (0, common_1.Param)('tokenId')),
+    __param(1, (0, current_user_decorator_1.CurrentUser)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], TokenController.prototype, "reveal", null);
+__decorate([
+    (0, common_1.Delete)(':tokenId'),
+    __param(0, (0, common_1.Param)('tokenId')),
+    __param(1, (0, current_user_decorator_1.CurrentUser)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], TokenController.prototype, "delete", null);
+exports.TokenController = TokenController = __decorate([
+    (0, common_1.Controller)('tokens'),
+    (0, common_1.UseGuards)(http_actor_guard_1.HttpActorGuard),
+    __metadata("design:paramtypes", [token_service_1.TokenService])
+], TokenController);
+//# sourceMappingURL=token.controller.js.map

package/dist/server/modules/token/token.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.controller.js","sourceRoot":"","sources":["../../../../src/server/modules/token/token.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAmH;AACnH,+CAAsG;AACtG,2FAAsG;AACtG,8EAAyE;AACzE,wEAAoE;AAI7D,IAAM,eAAe,GAArB,MAAM,eAAe;IAC1B,YAA6B,OAAqB;QAArB,YAAO,GAAP,OAAO,CAAc;IAAG,CAAC;IAGhD,AAAN,KAAK,CAAC,IAAI,CAAgB,KAAyB;QACjD,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IAGK,AAAN,KAAK,CAAC,MAAM,CAAS,OAAgB,EAAiB,KAAyB;QAC7E,MAAM,KAAK,GAAG,8BAAqB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,MAAM,IAAI,4BAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzD,CAAC;IAGK,AAAN,KAAK,CAAC,MAAM,CAAmB,OAAe,EAAU,OAAgB,EAAiB,KAAyB;QAChH,MAAM,KAAK,GAAG,8BAAqB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,MAAM,IAAI,4BAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACrF,CAAC;IAGK,AAAN,KAAK,CAAC,MAAM,CAAmB,OAAe,EAAiB,KAAyB;QACtF,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;IAGK,AAAN,KAAK,CAAC,MAAM,CAAmB,OAAe,EAAiB,KAAyB;QACtF,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;IAEO,YAAY,CAAC,OAAe;QAClC,MAAM,KAAK,GAAG,2BAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,MAAM,IAAI,4BAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtE,OAAO,KAAK,CAAC,IAAI,CAAC;IACpB,CAAC;CACF,CAAA;AArCY,0CAAe;AAIpB;IADL,IAAA,YAAG,GAAE;IACM,WAAA,IAAA,oCAAW,GAAE,CAAA;;;;2CAExB;AAGK;IADL,IAAA,aAAI,GAAE;IACO,WAAA,IAAA,aAAI,GAAE,CAAA;IAAoB,WAAA,IAAA,oCAAW,GAAE,CAAA;;;;6CAIpD;AAGK;IADL,IAAA,cAAK,EAAC,UAAU,CAAC;IACJ,WAAA,IAAA,cAAK,EAAC,SAAS,CAAC,CAAA;IAAmB,WAAA,IAAA,aAAI,GAAE,CAAA;IAAoB,WAAA,IAAA,oCAAW,GAAE,CAAA;;;;6CAIvF;AAGK;IADL,IAAA,YAAG,EAAC,oBAAoB,CAAC;IACZ,WAAA,IAAA,cAAK,EAAC,SAAS,CAAC,CAAA;IAAmB,WAAA,IAAA,oCAAW,GAAE,CAAA;;;;6CAE7D;AAGK;IADL,IAAA,eAAM,EAAC,UAAU,CAAC;IACL,WAAA,IAAA,cAAK,EAAC,SAAS,CAAC,CAAA;IAAmB,WAAA,IAAA,oCAAW,GAAE,CAAA;;;;6CAE7D;0BA9BU,eAAe;IAF3B,IAAA,mBAAU,EAAC,QAAQ,CAAC;IACpB,IAAA,kBAAS,EAAC,iCAAc,CAAC;qCAEc,4BAAY;GADvC,eAAe,CAqC3B"}

package/dist/server/modules/token/token.module.d.ts

@@ -0,0 +1,3 @@
+export declare class TokenModule {
+}
+//# sourceMappingURL=token.module.d.ts.map

package/dist/server/modules/token/token.module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.module.d.ts","sourceRoot":"","sources":["../../../../src/server/modules/token/token.module.ts"],"names":[],"mappings":"AAGA,qBAKa,WAAW;CAAG"}

package/dist/server/modules/token/token.module.js

@@ -0,0 +1,22 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenModule = void 0;
+const common_1 = require("@nestjs/common");
+const token_controller_1 = require("./token.controller");
+let TokenModule = class TokenModule {
+};
+exports.TokenModule = TokenModule;
+exports.TokenModule = TokenModule = __decorate([
+    (0, common_1.Module)({
+        // TokenService is supplied by the root contracts module. Do not bind a local default here:
+        // a feature-module provider would shadow SaaS's RemoteTokenService.
+        controllers: [token_controller_1.TokenController],
+    })
+], TokenModule);
+//# sourceMappingURL=token.module.js.map

package/dist/server/modules/token/token.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.module.js","sourceRoot":"","sources":["../../../../src/server/modules/token/token.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAwC;AACxC,yDAAqD;AAO9C,IAAM,WAAW,GAAjB,MAAM,WAAW;CAAG,CAAA;AAAd,kCAAW;sBAAX,WAAW;IALvB,IAAA,eAAM,EAAC;QACN,2FAA2F;QAC3F,oEAAoE;QACpE,WAAW,EAAE,CAAC,kCAAe,CAAC;KAC/B,CAAC;GACW,WAAW,CAAG"}

package/dist/server/modules/token/token.repository.d.ts

@@ -0,0 +1,264 @@
+import type { DbClient } from '@proofhound/db';
+declare const tokens: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "tokens";
+    schema: "ph_core";
+    columns: {
+        id: import("drizzle-orm/pg-core").PgColumn<{
+            name: "id";
+            tableName: "tokens";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        scope: import("drizzle-orm/pg-core").PgColumn<{
+            name: "scope";
+            tableName: "tokens";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        projectId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "project_id";
+            tableName: "tokens";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        connectorId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "connector_id";
+            tableName: "tokens";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        name: import("drizzle-orm/pg-core").PgColumn<{
+            name: "name";
+            tableName: "tokens";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        tokenHash: import("drizzle-orm/pg-core").PgColumn<{
+            name: "token_hash";
+            tableName: "tokens";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        tokenEncrypted: import("drizzle-orm/pg-core").PgColumn<{
+            name: "token_encrypted";
+            tableName: "tokens";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        prefix: import("drizzle-orm/pg-core").PgColumn<{
+            name: "prefix";
+            tableName: "tokens";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        ipWhitelist: import("drizzle-orm/pg-core").PgColumn<{
+            name: "ip_whitelist";
+            tableName: "tokens";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: unknown;
+            driverParam: unknown;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        lastUsedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "last_used_at";
+            tableName: "tokens";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        expiresAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "expires_at";
+            tableName: "tokens";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdBy: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_by";
+            tableName: "tokens";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_at";
+            tableName: "tokens";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        revokedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "revoked_at";
+            tableName: "tokens";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "pg";
+}>;
+export type UserTokenRow = typeof tokens.$inferSelect;
+export type UserTokenInsertRow = typeof tokens.$inferInsert;
+export interface UserTokenRowWithCreator extends UserTokenRow {
+    createdByDisplayName: string | null;
+}
+export declare class TokenRepository {
+    private readonly db;
+    constructor(db: DbClient);
+    private readonly selectFields;
+    listUserTokens(): Promise<UserTokenRowWithCreator[]>;
+    findUserTokenById(tokenId: string): Promise<UserTokenRowWithCreator | null>;
+    findUserTokenByName(name: string): Promise<UserTokenRow | null>;
+    insertUserToken(values: UserTokenInsertRow): Promise<UserTokenRow>;
+    updateUserToken(tokenId: string, values: Pick<UserTokenInsertRow, 'name' | 'expiresAt'>): Promise<UserTokenRowWithCreator | null>;
+    revokeUserToken(tokenId: string, revokedAt: Date): Promise<boolean>;
+}
+export {};
+//# sourceMappingURL=token.repository.d.ts.map

package/dist/server/modules/token/token.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.repository.d.ts","sourceRoot":"","sources":["../../../../src/server/modules/token/token.repository.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAI/C,QAAA,MAAQ,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAW,CAAC;AAE1B,MAAM,MAAM,YAAY,GAAG,OAAO,MAAM,CAAC,YAAY,CAAC;AACtD,MAAM,MAAM,kBAAkB,GAAG,OAAO,MAAM,CAAC,YAAY,CAAC;AAE5D,MAAM,WAAW,uBAAwB,SAAQ,YAAY;IAC3D,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AAID,qBACa,eAAe;IACW,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAElE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAgBlB;IAEL,cAAc,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC;IAQpD,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC;IAS3E,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAS/D,eAAe,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,YAAY,CAAC;IAOlE,eAAe,CACnB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,MAAM,GAAG,WAAW,CAAC,GACrD,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC;IASpC,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;CAQ1E"}

package/dist/server/modules/token/token.repository.js

@@ -0,0 +1,97 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenRepository = void 0;
+const common_1 = require("@nestjs/common");
+const drizzle_orm_1 = require("drizzle-orm");
+const db_1 = require("@proofhound/db");
+const database_constants_1 = require("../../../shared/database/database.constants");
+const { tokens } = db_1.schema;
+// The repository only handles rows where scope='user'. Webhook rows are self-managed by ConnectorRepository; this repo does not read or write them.
+// See docs/specs/06-database-schema.md §3.2 / docs/specs/08-saas-adapter-boundary.md §3.5.
+let TokenRepository = class TokenRepository {
+    constructor(db) {
+        this.db = db;
+        this.selectFields = {
+            id: tokens.id,
+            scope: tokens.scope,
+            projectId: tokens.projectId,
+            connectorId: tokens.connectorId,
+            name: tokens.name,
+            tokenHash: tokens.tokenHash,
+            tokenEncrypted: tokens.tokenEncrypted,
+            prefix: tokens.prefix,
+            ipWhitelist: tokens.ipWhitelist,
+            lastUsedAt: tokens.lastUsedAt,
+            expiresAt: tokens.expiresAt,
+            createdBy: tokens.createdBy,
+            createdByDisplayName: (0, drizzle_orm_1.sql) `NULL`,
+            createdAt: tokens.createdAt,
+            revokedAt: tokens.revokedAt,
+        };
+    }
+    async listUserTokens() {
+        return this.db
+            .select(this.selectFields)
+            .from(tokens)
+            .where((0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(tokens.scope, 'user'), (0, drizzle_orm_1.isNull)(tokens.revokedAt)))
+            .orderBy((0, drizzle_orm_1.desc)(tokens.createdAt));
+    }
+    async findUserTokenById(tokenId) {
+        const rows = await this.db
+            .select(this.selectFields)
+            .from(tokens)
+            .where((0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(tokens.id, tokenId), (0, drizzle_orm_1.eq)(tokens.scope, 'user'), (0, drizzle_orm_1.isNull)(tokens.revokedAt)))
+            .limit(1);
+        return rows[0] ?? null;
+    }
+    async findUserTokenByName(name) {
+        const rows = await this.db
+            .select()
+            .from(tokens)
+            .where((0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(tokens.scope, 'user'), (0, drizzle_orm_1.eq)(tokens.name, name), (0, drizzle_orm_1.isNull)(tokens.revokedAt)))
+            .limit(1);
+        return rows[0] ?? null;
+    }
+    async insertUserToken(values) {
+        const result = await this.db.insert(tokens).values(values).returning();
+        const row = result[0];
+        if (!row)
+            throw new Error('user token insert returned no row');
+        return row;
+    }
+    async updateUserToken(tokenId, values) {
+        const result = await this.db
+            .update(tokens)
+            .set(values)
+            .where((0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(tokens.id, tokenId), (0, drizzle_orm_1.eq)(tokens.scope, 'user'), (0, drizzle_orm_1.isNull)(tokens.revokedAt)))
+            .returning(this.selectFields);
+        return result[0] ?? null;
+    }
+    async revokeUserToken(tokenId, revokedAt) {
+        const result = await this.db
+            .update(tokens)
+            .set({ revokedAt })
+            .where((0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(tokens.id, tokenId), (0, drizzle_orm_1.eq)(tokens.scope, 'user'), (0, drizzle_orm_1.isNull)(tokens.revokedAt)))
+            .returning({ id: tokens.id });
+        return result.length > 0;
+    }
+};
+exports.TokenRepository = TokenRepository;
+exports.TokenRepository = TokenRepository = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(database_constants_1.DATABASE_CLIENT)),
+    __metadata("design:paramtypes", [Object])
+], TokenRepository);
+//# sourceMappingURL=token.repository.js.map

package/dist/server/modules/token/token.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.repository.js","sourceRoot":"","sources":["../../../../src/server/modules/token/token.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,6CAAyD;AAEzD,uCAAwC;AACxC,oFAA8E;AAE9E,MAAM,EAAE,MAAM,EAAE,GAAG,WAAM,CAAC;AAS1B,oJAAoJ;AACpJ,2FAA2F;AAEpF,IAAM,eAAe,GAArB,MAAM,eAAe;IAC1B,YAAqC,EAA6B;QAAZ,OAAE,GAAF,EAAE,CAAU;QAEjD,iBAAY,GAAG;YAC9B,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,oBAAoB,EAAE,IAAA,iBAAG,EAAe,MAAM;YAC9C,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;SACnB,CAAC;IAlB0D,CAAC;IAoBtE,KAAK,CAAC,cAAc;QAClB,OAAO,IAAI,CAAC,EAAE;aACX,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC;aACzB,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CAAC,IAAA,iBAAG,EAAC,IAAA,gBAAE,EAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,IAAA,oBAAM,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;aAC9D,OAAO,CAAC,IAAA,kBAAI,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,OAAe;QACrC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC;aACzB,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CAAC,IAAA,iBAAG,EAAC,IAAA,gBAAE,EAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,IAAA,gBAAE,EAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,IAAA,oBAAM,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;aACtF,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,IAAY;QACpC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CAAC,IAAA,iBAAG,EAAC,IAAA,gBAAE,EAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,IAAA,gBAAE,EAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,IAAA,oBAAM,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;aACrF,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAA0B;QAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC;QACvE,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC/D,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,OAAe,EACf,MAAsD;QAEtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE;aACzB,MAAM,CAAC,MAAM,CAAC;aACd,GAAG,CAAC,MAAM,CAAC;aACX,KAAK,CAAC,IAAA,iBAAG,EAAC,IAAA,gBAAE,EAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,IAAA,gBAAE,EAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,IAAA,oBAAM,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;aACtF,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAChC,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAAe,EAAE,SAAe;QACpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE;aACzB,MAAM,CAAC,MAAM,CAAC;aACd,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC;aAClB,KAAK,CAAC,IAAA,iBAAG,EAAC,IAAA,gBAAE,EAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,IAAA,gBAAE,EAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,IAAA,oBAAM,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;aACtF,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QAChC,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAC3B,CAAC;CACF,CAAA;AA1EY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;IAEE,WAAA,IAAA,eAAM,EAAC,oCAAe,CAAC,CAAA;;GADzB,eAAe,CA0E3B"}

package/dist/server/modules/token/token.service.d.ts

@@ -0,0 +1,23 @@
+import type { CreateUserTokenDto, CreateUserTokenResponseDto, DeleteUserTokenResponseDto, ListUserTokensResponseDto, RevealUserTokenResponseDto, UpdateUserTokenDto, UpdateUserTokenResponseDto } from '@proofhound/shared';
+import { AccessControlService } from '../../common/contracts/access-control.service';
+import type { CurrentUserPayload } from '../../common/decorators/current-user.decorator';
+import { CryptoService } from '../../../shared/crypto/crypto.service';
+import { TokenService, type ActionSource } from '../../common/contracts/token.service';
+import { TokenRepository } from './token.repository';
+export { TokenService };
+export type { ActionSource };
+export declare class LocalTokenService extends TokenService {
+    private readonly repo;
+    private readonly crypto;
+    private readonly accessControl;
+    constructor(repo: TokenRepository, crypto: CryptoService, accessControl: AccessControlService);
+    listUserTokens(actor: CurrentUserPayload): Promise<ListUserTokensResponseDto>;
+    createUserToken(dto: CreateUserTokenDto, actor: CurrentUserPayload, _source?: ActionSource): Promise<CreateUserTokenResponseDto>;
+    updateUserToken(tokenId: string, dto: UpdateUserTokenDto, actor: CurrentUserPayload, _source?: ActionSource): Promise<UpdateUserTokenResponseDto>;
+    revealUserToken(tokenId: string, actor: CurrentUserPayload, _source?: ActionSource): Promise<RevealUserTokenResponseDto>;
+    deleteUserToken(tokenId: string, actor: CurrentUserPayload, _source?: ActionSource): Promise<DeleteUserTokenResponseDto>;
+    private generatePlaintext;
+    private hashToken;
+    private toSummary;
+}
+//# sourceMappingURL=token.service.d.ts.map

package/dist/server/modules/token/token.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.service.d.ts","sourceRoot":"","sources":["../../../../src/server/modules/token/token.service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,kBAAkB,EAClB,0BAA0B,EAC1B,0BAA0B,EAC1B,yBAAyB,EACzB,0BAA0B,EAC1B,kBAAkB,EAClB,0BAA0B,EAE3B,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,+CAA+C,CAAC;AACrF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACzF,OAAO,EAAE,aAAa,EAAE,MAAM,uCAAuC,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,sCAAsC,CAAC;AACvF,OAAO,EAAE,eAAe,EAAmD,MAAM,oBAAoB,CAAC;AAEtG,OAAO,EAAE,YAAY,EAAE,CAAC;AACxB,YAAY,EAAE,YAAY,EAAE,CAAC;AAO7B,qBACa,iBAAkB,SAAQ,YAAY;IAE/C,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,aAAa;gBAFb,IAAI,EAAE,eAAe,EACrB,MAAM,EAAE,aAAa,EACrB,aAAa,EAAE,oBAAoB;IAKhD,cAAc,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAU7E,eAAe,CACnB,GAAG,EAAE,kBAAkB,EACvB,KAAK,EAAE,kBAAkB,EACzB,OAAO,GAAE,YAAoB,GAC5B,OAAO,CAAC,0BAA0B,CAAC;IA4BhC,eAAe,CACnB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,kBAAkB,EACvB,KAAK,EAAE,kBAAkB,EACzB,OAAO,GAAE,YAAoB,GAC5B,OAAO,CAAC,0BAA0B,CAAC;IAsBhC,eAAe,CACnB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,kBAAkB,EACzB,OAAO,GAAE,YAAoB,GAC5B,OAAO,CAAC,0BAA0B,CAAC;IAahC,eAAe,CACnB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,kBAAkB,EACzB,OAAO,GAAE,YAAoB,GAC5B,OAAO,CAAC,0BAA0B,CAAC;IActC,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,SAAS;CAalB"}